Trojan

IL:Trojan.MSILZilla.2593 (file analysis)

Malware Removal

The IL:Trojan.MSILZilla.2593 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What IL:Trojan.MSILZilla.2593 virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

How to determine IL:Trojan.MSILZilla.2593?


File Info:

crc32: 0F8E39C4
md5: b105bec27851dabe21e1cf1c56bfda0e
name: B105BEC27851DABE21E1CF1C56BFDA0E.mlw
sha1: f822c5a33d94cbea0f69ce327257420b33b0d552
sha256: ed133e3bc6f781c4a981f93c180e38c70572ad80e48c12294585767e583b9d0f
sha512: aecaed590d316f3a762b97499bcbd62d0d59f31404a171b9f8daeff2dcc70726886fb652f1d96f257e2ab63c64f9a2b32b69d868836114a526b39e0b9b6c710c
ssdeep: 12288:6sbxvLuoLXS7P2qGuV3uZlaDVEPWN53QwvJH4vNiCmLJ1GcyQizeVzhst:Vi+qDVeZlaDkWHgwq9uXiQzhst
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2020 - 2021
Assembly Version: 1.0.0.0
InternalName: CharUnicodeIn.exe
FileVersion: 1.0.0.0
CompanyName:
LegalTrademarks:
Comments:
ProductName: Maze Creator
ProductVersion: 1.0.0.0
FileDescription: Maze Creator
OriginalFilename: CharUnicodeIn.exe

IL:Trojan.MSILZilla.2593 also known as:

ALYacIL:Trojan.MSILZilla.2593
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_80% (D)
BitDefenderIL:Trojan.MSILZilla.2593
Cybereasonmalicious.33d94c
CyrenW32/Trojan.SW.gen!Eldorado
SymantecScr.Malcode!gdn34
ESET-NOD32a variant of MSIL/Kryptik.ACPC
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Backdoor.MSIL.Remcos.gen
MicroWorld-eScanIL:Trojan.MSILZilla.2593
Ad-AwareIL:Trojan.MSILZilla.2593
SophosTroj/Krypt-BN
BitDefenderThetaGen:NN.ZemsilF.34142.gn0@aqTpVCi
McAfee-GW-EditionBehavesLike.Win32.Fareit.tc
FireEyeGeneric.mg.b105bec27851dabe
EmsisoftTrojan.Agent (A)
SentinelOneStatic AI – Malicious PE
ArcabitIL:Trojan.MSILZilla.DA21
ZoneAlarmHEUR:Backdoor.MSIL.Remcos.gen
GDataIL:Trojan.MSILZilla.2593
AhnLab-V3Trojan/Win.AgentTesla.C4605319
McAfeeAgentTesla-FDBQ!B105BEC27851
MAXmalware (ai score=87)
VBA32Malware-Cryptor.MSIL.AgentTesla.Heur
MalwarebytesTrojan.MalPack
IkarusTrojan.MSIL.Inject
FortinetMSIL/Kryptik.ABET!tr

How to remove IL:Trojan.MSILZilla.2593?

IL:Trojan.MSILZilla.2593 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment